@robosystems/core 0.5.8 → 0.6.0

package/components/console/ConsoleContent.js

@@ -406,51 +406,51 @@ export function ConsoleContent({ config }) {
         }
     };
     const showMcpSetup = async () => {
-        addSystemMessage('Creating MCP API key...', true);
+        addSystemMessage('Creating graph-scoped connector key...', true);
+        const apiUrl = process.env.NEXT_PUBLIC_ROBOSYSTEMS_API_URL ||
+            'https://api.robosystems.ai';
+        const { mcp } = config;
+        const contextId = graphId || mcp.contextIdFallback;
         try {
-            const { createUserApiKey } = await import('@robosystems/client/sdk');
-            const response = await createUserApiKey({
-                body: {
-                    name: `MCP - Console Generated - ${new Date().toLocaleDateString()}`,
-                },
-            });
-            if (!response.data) {
-                throw new Error('Failed to create API key');
-            }
-            const apiKey = response.data.key;
-            const apiUrl = process.env.NEXT_PUBLIC_ROBOSYSTEMS_API_URL ||
-                'https://api.robosystems.ai';
-            const { mcp } = config;
+            const { createMcpConnectorUrl } = await import('../../lib/mcp-connector');
+            // The graph id lives in the URL path and never becomes a tool argument,
+            // so one connector is anchored to exactly one graph. Multi-graph users
+            // add one connector per graph, which is why the name carries the id.
+            // The key is graph-scoped: valid only for this graph, revocable in
+            // Settings → API Keys, and rejected on every account-level surface.
+            const connector = await createMcpConnectorUrl(contextId, { apiUrl });
+            const connectorName = `${mcp.serverName}-${contextId}`;
             const exampleLines = mcp.exampleQuestions
                 .map((q) => `  • "${q}"`)
                 .join('\n');
             addSystemMessage(`MCP Setup Instructions:\n` +
                 `═══════════════════════════════════════════════════════════════\n\n` +
-                `API Key Created Successfully!\n\n` +
-                `Add this configuration to claude_desktop_config.json:\n\n` +
-                `   {\n` +
-                `     "mcpServers": {\n` +
-                `       "${mcp.serverName}": {\n` +
-                `         "command": "npx",\n` +
-                `         "args": ["-y", "${mcp.packageName}@latest"],\n` +
-                `         "env": {\n` +
-                `           "ROBOSYSTEMS_API_URL": "${apiUrl}",\n` +
-                `           "ROBOSYSTEMS_API_KEY": "${apiKey}",\n` +
-                `           "ROBOSYSTEMS_GRAPH_ID": "${graphId || mcp.contextIdFallback}"\n` +
-                `         }\n` +
-                `       }\n` +
-                `     }\n` +
-                `   }\n\n` +
-                `Restart Claude Desktop or Claude Code to apply.\n\n` +
+                `Graph-scoped API key created — it works only for ${contextId}\n` +
+                `and can be revoked anytime in Settings → API Keys.\n\n` +
+                `Claude (claude.ai / Desktop)\n` +
+                `  Settings → Connectors → Add custom connector, then paste this\n` +
+                `  URL (the key rides inside it — no header field needed):\n` +
+                `  ${connector.url}\n\n` +
+                `Claude Code\n` +
+                `  claude mcp add --transport http ${connectorName} \\\n` +
+                `    ${connector.endpoint} \\\n` +
+                `    --header "X-API-Key: ${connector.apiKey}"\n\n` +
+                `Cursor / VS Code (mcp.json)\n` +
+                `  "${connectorName}": {\n` +
+                `    "url": "${connector.endpoint}",\n` +
+                `    "headers": { "X-API-Key": "${connector.apiKey}" }\n` +
+                `  }\n\n` +
                 `Once connected, ask Claude questions like:\n` +
                 `${exampleLines}\n\n` +
-                `Keep this API key secure! It has full access to your account.`, true);
+                `Clients without HTTP transport support can use the stdio bridge\n` +
+                `in proxy mode: https://github.com/RoboFinSystems/robosystems-mcp-client\n\n` +
+                `The connector URL contains the key — treat it like a password.`, true);
         }
         catch (error) {
-            addErrorMessage(`Failed to create API key: ${error.message || 'Unknown error'}\n\n` +
-                `You can manually create an API key in Settings and use it with:\n` +
-                `  ROBOSYSTEMS_API_URL: https://api.robosystems.ai\n` +
-                `  ROBOSYSTEMS_GRAPH_ID: ${graphId || config.mcp.contextIdFallback}`);
+            addErrorMessage(`Failed to create connector key: ${error.message || 'Unknown error'}\n\n` +
+                `You can create an API key in Settings and connect with:\n` +
+                `  URL:    ${apiUrl}/v1/graphs/${contextId}/mcp\n` +
+                `  Header: X-API-Key: <your key>`);
         }
     };
     const handleCommand = async (command) => {

package/components/console/graphAwareConfig.d.ts

@@ -35,7 +35,9 @@ export declare const EXAMPLE_SETS: Record<GraphExampleKind, GraphExampleSet>;
  * @param preferredKind Tiebreak used only when a graph carries more than one
  *   entity extension (e.g. both roboledger and roboinvestor). Pass the app's
  *   own lens (a RoboLedger app passes 'roboledger') so a dual-extension graph
- *   shows the examples that fit the app the user is in.
+ *   shows the examples that fit the app the user is in. With no lens — the
+ *   brand-neutral RoboSystems console — a graph carrying the roboledger schema
+ *   gets ledger examples, never portfolio ones.
  */
 export declare function getGraphExampleKind(graph: GraphInfo | undefined, preferredKind?: GraphExampleKind): GraphExampleKind;
 /** App-specific branding merged with the graph-derived example set. */
@@ -50,7 +52,8 @@ export interface ConsoleBranding {
     closingMessage: string;
     mcp: {
         serverName: string;
-        packageName: string;
+        /** @deprecated Unused since the remote MCP transport landed. */
+        packageName?: string;
         contextIdFallback: string;
     };
     /** Defaults to "Example Cypher Queries:". */

package/components/console/graphAwareConfig.js

@@ -333,7 +333,9 @@ export const EXAMPLE_SETS = {
  * @param preferredKind Tiebreak used only when a graph carries more than one
  *   entity extension (e.g. both roboledger and roboinvestor). Pass the app's
  *   own lens (a RoboLedger app passes 'roboledger') so a dual-extension graph
- *   shows the examples that fit the app the user is in.
+ *   shows the examples that fit the app the user is in. With no lens — the
+ *   brand-neutral RoboSystems console — a graph carrying the roboledger schema
+ *   gets ledger examples, never portfolio ones.
  */
 export function getGraphExampleKind(graph, preferredKind) {
     var _a;
@@ -347,7 +349,7 @@ export function getGraphExampleKind(graph, preferredKind) {
     if (hasInvestor && hasLedger) {
         return preferredKind === 'roboledger' || preferredKind === 'roboinvestor'
             ? preferredKind
-            : 'roboinvestor';
+            : 'roboledger';
     }
     if (hasInvestor)
         return 'roboinvestor';

package/components/console/types.d.ts

@@ -27,10 +27,15 @@ export interface ConsoleHeaderConfig {
     gradientTo: string;
 }
 export interface ConsoleMcpConfig {
-    /** MCP server name in the JSON config, e.g. "robosystems" */
+    /** Connector name prefix, e.g. "robosystems". The graph id is appended, so
+     *  each of a user's graphs gets a distinctly named connector. */
     serverName: string;
-    /** npm package name, e.g. "@robosystems/mcp" */
-    packageName: string;
+    /**
+     * @deprecated Unused since the remote MCP transport landed — `/mcp` now emits
+     * a URL + `X-API-Key` header instead of an npx stdio config. Kept optional so
+     * consuming apps can drop it on their own schedule.
+     */
+    packageName?: string;
     /** Example questions shown after MCP setup */
     exampleQuestions: string[];
     /** Fallback text for graph ID placeholder, e.g. "your_graph_id" */

package/index.d.ts

@@ -4,7 +4,7 @@ export { clearUserCookies, clearUserLocalStorage, clearUserSessionStorage, listU
 export { AppSwitcher, AuthGuard, AuthProvider, SignInForm, SignUpForm, useAuth, } from './auth-components';
 export { useApiError, useMediaQuery, useToast, useUser, useUserLimits, type ToastMessage, } from './hooks';
 export { createGraphContext, createGraphProvider, createUseGraphContext, EntityProvider, GraphContext, GraphProvider, OrgProvider, ServiceOfferingsProvider, SidebarProvider, useEntity, useGraphContext, useOrg, useServiceOfferings, useSidebarContext, type EntityContextValue, type EntityProviderProps, type GraphContextValue, type GraphProviderProps, type GraphState, type OrgContextState, type OrgContextValue, type OrgProviderProps, type ServiceOfferings, } from './contexts';
-export { clientGraphCookie, clientSidebarCookie, entityCookie, graphCookie, sidebarCookie, type EntityCookie, type GraphCookie, type SidebarCookie, } from './lib';
+export { clientGraphCookie, clientSidebarCookie, createMcpConnectorUrl, entityCookie, graphCookie, sidebarCookie, type EntityCookie, type GraphCookie, type McpConnectorUrl, type SidebarCookie, } from './lib';
 export { generateEntityUri, isUUID, UUID_REGEX } from './utils';
 export { clearGraphSelection, getGraphSelection, persistGraphSelection, } from './actions/graph-actions';
 export { clearEntitySelection, getEntitySelection, persistEntitySelection, } from './actions/entity-actions';

package/index.js

@@ -20,7 +20,7 @@ OrgProvider,
 // Service offerings context
 ServiceOfferingsProvider, SidebarProvider, useEntity, useGraphContext, useOrg, useServiceOfferings, useSidebarContext, } from './contexts';
 // Export lib utilities
-export { clientGraphCookie, clientSidebarCookie, entityCookie, graphCookie, sidebarCookie, } from './lib';
+export { clientGraphCookie, clientSidebarCookie, createMcpConnectorUrl, entityCookie, graphCookie, sidebarCookie, } from './lib';
 // Export utils
 export { generateEntityUri, isUUID, UUID_REGEX } from './utils';
 // Export server actions

package/lib/index.d.ts

@@ -1,3 +1,4 @@
 export { clientSidebarCookie, sidebarCookie, type SidebarCookie, } from './sidebar-cookie';
 export { clientGraphCookie, graphCookie, type GraphCookie, } from './graph-cookie';
 export { entityCookie, type EntityCookie } from './entity-cookie';
+export { createMcpConnectorUrl, type McpConnectorUrl } from './mcp-connector';

package/lib/index.js

@@ -1,3 +1,4 @@
 export { clientSidebarCookie, sidebarCookie, } from './sidebar-cookie';
 export { clientGraphCookie, graphCookie, } from './graph-cookie';
 export { entityCookie } from './entity-cookie';
+export { createMcpConnectorUrl } from './mcp-connector';

package/lib/mcp-connector.d.ts

@@ -0,0 +1,29 @@
+export interface McpConnectorUrl {
+    /** Pasteable connector URL with the graph-scoped key embedded as `?token=` */
+    url: string;
+    /** Bare MCP endpoint URL (no credential) — for header-capable clients */
+    endpoint: string;
+    /** The plaintext graph-scoped API key (returned once at mint) */
+    apiKey: string;
+    /** Name the key was created under (visible in Settings → API Keys) */
+    keyName: string;
+    graphId: string;
+}
+/**
+ * Mint a graph-scoped API key and assemble the MCP connector URL for it.
+ *
+ * The URL is for clients that cannot send custom headers (claude.ai /
+ * Claude Desktop custom connectors): the scoped key travels as a `token`
+ * query parameter, which the server honors only on the MCP endpoint and
+ * only for keys scoped to that URL's graph — account-wide keys are
+ * rejected there. The key works for exactly this graph (and its
+ * subgraphs), is rejected on every account-level surface, and can be
+ * revoked from Settings → API Keys like any other key.
+ *
+ * Header-capable clients (Claude Code, Cursor, VS Code) should use the
+ * bare `endpoint` with the key in an `X-API-Key` header instead.
+ */
+export declare function createMcpConnectorUrl(graphId: string, options?: {
+    apiUrl?: string;
+    name?: string;
+}): Promise<McpConnectorUrl>;

package/lib/mcp-connector.js

@@ -0,0 +1,35 @@
+const DEFAULT_API_URL = 'https://api.robosystems.ai';
+/**
+ * Mint a graph-scoped API key and assemble the MCP connector URL for it.
+ *
+ * The URL is for clients that cannot send custom headers (claude.ai /
+ * Claude Desktop custom connectors): the scoped key travels as a `token`
+ * query parameter, which the server honors only on the MCP endpoint and
+ * only for keys scoped to that URL's graph — account-wide keys are
+ * rejected there. The key works for exactly this graph (and its
+ * subgraphs), is rejected on every account-level surface, and can be
+ * revoked from Settings → API Keys like any other key.
+ *
+ * Header-capable clients (Claude Code, Cursor, VS Code) should use the
+ * bare `endpoint` with the key in an `X-API-Key` header instead.
+ */
+export async function createMcpConnectorUrl(graphId, options = {}) {
+    var _a, _b;
+    const { createUserApiKey } = await import('@robosystems/client/sdk');
+    const apiUrl = ((_a = options.apiUrl) !== null && _a !== void 0 ? _a : DEFAULT_API_URL).replace(/\/$/, '');
+    const keyName = (_b = options.name) !== null && _b !== void 0 ? _b : `MCP Connector - ${graphId} - ${new Date().toLocaleDateString()}`;
+    const response = await createUserApiKey({
+        body: { name: keyName, graph_id: graphId },
+    });
+    if (!response.data) {
+        throw new Error('Failed to create connector API key');
+    }
+    const endpoint = `${apiUrl}/v1/graphs/${graphId}/mcp`;
+    return {
+        url: `${endpoint}?token=${response.data.key}`,
+        endpoint,
+        apiKey: response.data.key,
+        keyName,
+        graphId,
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@robosystems/core",
-  "version": "0.5.8",
+  "version": "0.6.0",
   "description": "Shared RoboSystems frontend core library (auth, contexts, task monitoring, UI components) for the RoboSystems Next.js apps",
   "license": "MIT",
   "private": false,
@@ -27,7 +27,7 @@
     "tailwind-merge": "^3"
   },
   "peerDependencies": {
-    "@robosystems/client": ">=0.6.2 <2",
+    "@robosystems/client": ">=1.2 <2",
     "flowbite-react": "^0.12.5",
     "next": ">=15 <17",
     "react": ">=18 <20",